CVE-2006-5909

Published: Nov 15, 2006Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts.

Affected (1)

Products: Paul Tarjan: Stanford Conference And Research Forum

Paul Tarjan

1 product

Stanford Conference And Research Forum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Paul Tarjan Stanford Conference And Research Forum	Version beta

Related CWEs

CWE-264

References (16)

http://secunia.com/advisories/24311

Source: cve@mitre.org

Vendor Advisory

http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/450679/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/460196/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20934

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0760

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/30037

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32700

Source: cve@mitre.org

http://secunia.com/advisories/24311